SYSTEM FOR STRUCTURED ENCRYPTION OF PAYMENT CARD TRACK DATA

• US 20110246315A1
• Filed: 04/01/2011
• Published: 10/06/2011
• Est. Priority Date: 04/05/2010
• Status: Active Grant

• Current Assignee: Micro Focus LLC (Open Text Corporation)
• Original Assignee: Voltage Security Incorporated (HP Inc.)
• Inventors: Minner, Richard T., Green, Jacob, Leong, Michael S., Pauker, Matthew J., Spies, Terence
• Granted Patent: US 8,666,823 B2
• Time in Patent Office: Days
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1091 Use of an encrypted form of the PIN

Abstract

A system may include a point-of-sale system that gathers payment card track data from a payment card and a payment card gateway that processes the track data to authorize purchase transactions. The point-of-sale system may remove sensitive data such as a portion of a primary account number from the track data and may compress the removed data. The compressed version of the data may be appended to a discretionary field in the track data. The discretionary field may be encrypted following insertion of the compressed data. Track data that has been modified in this way may be conveyed to the payment gateway for processing.

Claims

1. A method for securing data conveyed over a communications network between a point-of-sale system that receives track data from payment cards and a payment gateway that performs payment card authorization operations, comprising:

with processing circuitry at the point-of-sale system, obtaining track data from a payment card;

with the processing circuitry at the point-of-sale system, removing selected primary account number digits from a primary account number in the track data;

with the processing circuitry at the point-of sale system, compressing the removed primary account number digits to form compressed primary account number data; and

with the processing circuitry at the point-of sale system, inserting the compressed primary account number data into a discretionary field of the track data to create a modified discretionary field.

2. The method defined in claim 1 further comprising:

following insertion of the compressed primary account number data into the discretionary field to create the modified discretionary field, encrypting the modified discretionary field.

3. The method defined in claim 2, wherein compressing the removed primary account number digits comprises encoding the removed primary account number digits using alphanumeric characters.

4. The method defined in claim 3, wherein the primary account number has four trailing digits and wherein removing the selected primary account number digits comprises removing digits from the primary account number other than the four trailing digits.

5. The method defined in claim 4, wherein the primary account number has six leading digits and wherein removing the selected primary account number digits comprises removing all digits from the primary account number between the six leading digits and the four trailing digits.

6. The method defined in claim 1, further comprising:

inserting information into the primary account number digits in the track data that represents how many of the selected primary account number digits were removed.

7. The method defined in claim 6 further comprising:

inserting a checksum adjustment value into the primary account number digits.

8. The method defined in claim 7 wherein inserting the information into the primary account number digits comprises inserting at least a first digit and wherein inserting the checksum adjustment value into the primary account number digits comprises inserting a second digit.

9. The method defined in claim 8 wherein the first and second digits are inserted adjacent to one another within the primary account number digits and wherein the checksum adjustment value is selected by the processing circuitry to make a checksum of the primary account number digits that includes the first and second digits valid.

10. The method defined in claim 8 wherein the first and second digits are inserted adjacent to one another within the primary account number digits and wherein the checksum adjustment value comprises an offset checksum value that is selected by the processing circuitry to make a checksum of the primary account number digits including the first and second digits invalid and offset by a predetermined amount from a valid checksum value for the primary account number digits.

11. The method defined in claim 2 further comprising:

transmitting the track data with the encrypted modified discretionary field to the payment gateway from the point-of-sale system through at least one interposed system.

12. The method defined in claim 11 further comprising:

with processing circuitry at the payment gateway, decrypting the encrypted modified discretionary field.

13. The method defined in claim 12 further comprising:

with processing circuitry at the payment gateway, extracting the compressed primary account number data from the modified discretionary field following decryption of the encrypted modified discretionary field.

14. A method for securing data conveyed over a communications network between a point-of-sale system that receives track data from payment cards and a payment gateway that performs payment card authorization operations, wherein the track data includes personal account number data and a discretionary field, the method comprising:

with processing circuitry at the point-of-sale system, compressing selected track data to produce compressed track data, wherein the selected track data has a length and wherein the compressed track data has a length that is shorter than the length of the selected track data; and

with the processing circuitry, inserting the compressed track data into the discretionary field.

15. The method defined in claim 14 wherein the selected track data comprises part of the primary account number and wherein compressing the selected track data comprises encoding the part of the primary account number using a character space that includes at least some non-digit characters.

16. The method defined in claim 14 wherein the selected track data includes payment card expiration date data and wherein compressing the selected track data comprises compressing the payment card expiration date data.

17. The method defined in claim 14 further comprising:

with the processing circuitry at the point-of-sale system, encrypting the discretionary field using format preserving encryption.

18. A method for processing payment card track data, comprising:

losslessly compressing a part of the payment card track data so that the payment card track data shrinks from a first length to a second length that is shorter than the first length; and

inserting the compressed part of the payment card track data into a discretionary field in the payment card track data.

19. The method defined in claim 18 further comprising:

encrypting the discretionary field after the compressed part of the payment card track data has been inserted into the discretionary field.

20. The method defined in claim 19 further comprising:

removing the part of the payment card track data from a primary account number portion of the payment card track data; and

transmitting the payment card track data from which the part of the payment card track data has been removed and in which the discretionary field has been encrypted through a network.